1) Who we are (Controller)
RedelingTech ("we", "us") is the controller for personal data collected via our website, email, and sales/onboarding flows. Contact: sredelinghuys2025@gmail.com.
2) Scope
This policy covers how we handle your data when you interact with RedelingTech (e.g., inquiries, quotes, onboarding, billing). For data collected on our clients' websites, the client is the controller. We act as a processor only if agreed in writing (DPA).
3) What personal data we process
Identity & contact: name, email, phone, company.
Project info: goals, requirements, content you provide.
Technical: IP address, device/browser info, pages visited (via cookies/analytics if enabled).
Billing: invoice details; payment status. (Card data is handled by the payment provider—we don't store it.)
4) Why we use your data (GDPR legal bases)
- To respond, quote, and deliver projects (contract necessity, Art. 6(1)(b)).
- To operate and secure our website/services (legitimate interests, Art. 6(1)(f)).
- To send updates/marketing (consent, Art. 6(1)(a); you can opt out anytime).
- To meet legal/finance duties (legal obligation, Art. 6(1)(c)).
5) How long we keep it (retention)
Sales/communication records: up to 24 months after last contact.
Project records & access logs: as needed for delivery + 24 months.
Invoices/financial records: 7 years (statutory).
After retention, data is deleted or anonymized.
6) Sharing & processors
We don't sell your data. We use vetted service providers (e.g., hosting/CDN, email, analytics, forms, payment). They only process data per our instructions and under a data processing agreement where required.
7) International transfers
Some providers may be outside the EEA. Where we transfer data internationally, we rely on lawful safeguards (e.g., EU-US Data Privacy Framework participation or Standard Contractual Clauses).
8) Cookies & tracking
We use essential cookies to run the site and, if enabled, analytics to improve it. You can control cookies in your browser and (if present) via our cookie banner/preferences. Analytics is configured to minimize data where possible.
9) Your rights (EU/UK GDPR)
You can access, rectify, erase, restrict, object (including to marketing), and request data portability. Where processing is based on consent, you may withdraw consent at any time.
You also have the right to lodge a complaint with your local authority; in the Netherlands: Autoriteit Persoonsgegevens.
10) Children
Our services are not directed to individuals under 16. We don't knowingly collect children's data.
11) Security
We use appropriate technical and organizational measures (access controls, encryption in transit, least-privilege, backups) to protect personal data. No method is 100% secure.
12) If we process your customers' data
For client websites/systems, the client is the controller. We only act as a processor with a signed DPA that sets instructions, security, and sub-processors.
13) Changes to this policy
We may update this policy; the latest version is published here with the effective date.
14) Contact
Questions or requests about this policy or your rights: sredelinghuys2025@gmail.com.